[CentOS] SELinux - way of the future or good idea but !!!

Thu Dec 9 23:00:38 UTC 2010
Christopher Chan <christopher.chan at bradbury.edu.hk>

On Thursday, December 09, 2010 11:08 PM, Lamar Owen wrote:
> On Wednesday, December 08, 2010 10:06:34 pm Warren Young wrote:
>> That's great if you are wise enough to forsee all problems that an
>> automatic update can cause.
>
>> I am not that wise.
>
> Nor am I; that's why I have testing server VM's on which to stage updates.  Even on the production servers, thanks to them being VMware guests I can pull a snapshot prior to doing the updates, and if the update breaks things badly enough I can roll back the snapshot from VMware and triage the problem.  Updates should never be blind, IMHO, especially for production servers.
>
> That's also why I keep regular backups of my laptop; in that case I'm tracking Fedora (although I'm seriously considering purchasing RHEL Workstation), and even then I have a test desktop to see if anything major breaks.  While the test desktop is not identically configured, it is close enough to be a valid test case, all the way down to the nVidia graphics.

Yup, that's why I was basically staging for HQ so that they can 
implement SELinux on all the other school servers.